tree 2f28ff59a691edcc8874b460a4f4e2f8075f611d
parent 6d32c850621b0be75777b9102b14f6268bbd9f0f
author Stephen Smalley <sds@tycho.nsa.gov> 1398796144 -0700
committer Paul Moore <pmoore@redhat.com> 1398970574 -0400

selinux:  Report permissive mode in avc: denied messages.

We cannot presently tell from an avc: denied message whether access was in
fact denied or was allowed due to global or per-domain permissive mode.
Add a permissive= field to the avc message to reflect this information.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>